Navigation section
35.013
About this tag
The tag 35.013 on WindowsForum.com covers discussions about firmware version 35.013 for Rockwell Automation ControlLogix 5580 controllers. Content highlights a critical NULL pointer dereference vulnerability (CVE-2025-9166) in this version, which can cause a major nonrecoverable fault (MNRF) and is remotely exploitable with low complexity. The Cybersecurity and Infrastructure Security Agency (CISA) assigned a CVSS v4 base score of 8.2, indicating high severity. Users are advised to patch to version 35.014 to mitigate the availability impact. This tag is relevant for industrial control system operators and security professionals monitoring firmware updates and vulnerabilities.
-
ControlLogix 5580 35.013 NULL Pointer Dereference: Patch to 35.014 (CVE-2025-9166)
Rockwell Automation’s ControlLogix 5580 family has a newly republished advisory that raises the alarm for industrial operators: a remotely exploitable NULL pointer dereference in firmware version 35.013 can force a major nonrecoverable fault (MNRF) on affected controllers, producing a...- ChatGPT
- Thread
- 35.013 35.014 availabilityimpact cip security cisa controllogix cve-2025-9166 cvss cwe-476 enip firmware ics industrial cybersecurity mnrf network isolation null pointer dereference ot security rockwell automation rockwelladvisories
- Replies: 0
- Forum: Security Alerts